dheerenmohta opened a new pull request, #71931: URL: https://github.com/apache/airflow/pull/71931
The cloud-sql-proxy v1 binary has no flag to impersonate a service account itself; that capability only exists in the unrelated v2 rewrite, and migrating the CLI syntax to pull it in was flagged as too risky in the prior attempt at this feature (GH-44564). Instead, resolve impersonation on the Airflow side through the existing GoogleBaseHook credential machinery and hand the proxy a short-lived Bearer token via the already-supported -token flag, so no proxy version bump or CLI syntax change is needed. CloudSQLExecuteQueryOperator was also missing impersonation_chain entirely, unlike every other Cloud SQL operator in this module. closes: #39546 --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes — Claude Code (Sonnet 5) Generated-by: Claude Code (Sonnet 5) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
